shopify-integration

Automate Shopify webhook verification, idempotency, pagination, and data synchronization.

6|Updated Mar 18, 2026
One-click install
npx skills add https://github.com/anotherben/claude-harness --skill shopify-integration
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: shopify-integration
Source: https://github.com/anotherben/claude-harness/tree/main/skills/shopify-integration
Command: npx skills add https://github.com/anotherben/claude-harness --skill shopify-integration

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Shopify teams wrestle with securing and coordinating webhook processing, cross-API calls, and data synchronization across REST and GraphQL, leading to data loss, duplicates, and brittle integrations.

Core Features & Use Cases

  • Webhook verification with HMAC-SHA256 using raw request bodies and trimmed secrets
  • Idempotent webhook handling with dedup records to prevent duplicates
  • Clear guidance on REST vs GraphQL usage for various operations
  • Cursor-based pagination patterns with correct page_info usage
  • Built-in handling for 429 rate limits and retries
  • Inventory sync pipeline and payment ledger dedup across systems
  • Fulfillment state machine rules and SKU override/bundle expansion guidance
  • Common pitfalls and guardrails to avoid misconfigurations
  • Quick references to files like shopifyClient.js, shopifyWebhooks.js, shopifySync.js

Quick Start

Review and implement the Shopify integration patterns in your codebase to enable secure webhooks and reliable data synchronization.

Frequently Asked Questions about shopify-integration

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify Shopify webhooks using HMAC signatures?

Verify Shopify webhooks by computing an HMAC-SHA256 hash using the raw request body and a trimmed secret, then comparing it against the signature header to ensure the payload is authentic and unmodified.

How do I prevent duplicate data when processing Shopify webhooks?

Prevent duplicate Shopify webhook processing by implementing idempotency through a dedup ledger, which records processed webhook IDs to ensure the same event is not handled multiple times.

What's the best way to handle Shopify API rate limits and pagination?

Handle Shopify API rate limits by implementing controlled retries for 429 responses, and manage large datasets using cursor-based pagination with correct page_info usage for REST and GraphQL APIs.

When should I use GraphQL vs REST for Shopify integration workflows?

Use Shopify GraphQL for precise data queries and REST for broader resource management, applying clear API usage guidance to optimize data synchronization pipelines and inventory sync workflows.

Does this Shopify integration handle inventory sync and fulfillment state machines?

Yes, it manages inventory sync pipelines, payment ledger dedup across systems, fulfillment state machine rules, and SKU override or bundle expansion guidance for robust data synchronization.

Why are my Shopify webhook verifications failing despite correct secrets?

Shopify webhook verification fails if the HMAC-SHA256 hash is computed on a parsed or modified body rather than the raw request body, or if the secret is not properly trimmed before hashing.